47.237.167.249

{ } JSON 🔧 Full Actions API

🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

## IP Intelligence Briefing: 47.237.167.249/32

Classification: Cloud Infrastructure | Risk Level: Low (Score: 25) | Report Date: Current

Executive Summary

IP address 47.237.167.249 is a cloud-hosted infrastructure endpoint registered to Alibaba Cloud LLC (ASN 45102) within the 47.235.0.0/16 CIDR block. The address demonstrates low-risk characteristics with no active malicious indicators, limited threat presence, and consistent operational stability.

Infrastructure Profile

Organization: Alibaba Cloud LLC
Network: AL-3 (47.235.0.0/16)
ASN: 45102
RIR: ARIN
Infrastructure Type: Cloud Compute / Single-Service Host
Geolocation: United States (US)

Service Exposure

Open Ports: TCP/22 (SSH) – OpenSSH 9.6p1 Ubuntu variant detected
TLS Certificate: None present
HTTP Services: No web services detected
DNS Resolution: Forward resolution not confirmed; no PTR records

Threat Assessment

Overall Risk Score: 25 / 100 (Low Risk)
Malicious Indicators: None identified
Known Attacker: No
Spam Source: No
Tor Exit Node: No
DNSBL Listings: 1 / 8 lists (minimal operator score: 0.1304)
Abuse Confidence Score: Not applicable
Campaign Correlations: None detected

Neighborhood Analysis

The /24 subnet (47.237.167.0/24) exhibits:

Abuse Density: 0.3333 (low)
Subnet Classification: Mostly Clean
Total Siblings: 3
Active Siblings: 1
Threat Siblings: 1
Adjacent IPs: 47.237.167.49 (Risk: 25), 47.237.167.117 (Risk: 25)

All neighboring addresses maintain low-risk profiles, indicating this is a generally legitimate cloud infrastructure cluster.

Historical Observations

Analysis of 15 historical observations reveals:

Ownership Stability: No ownership changes recorded
Infrastructure Classification: Consistently identified as cloud hosting
Threat Persistence: No persistent malicious behavior detected
Recent Activity: Most recent signals dated 2026-07-30 with high confidence in ownership and network classification

Network Relationships

Same Network Relationships: 2 entries linking to AL-3 network block
No Correlated Hostnames/Certificates: None identified
Control Plane: Route changes over 30 days: 0; Route stability: False (minor anomaly)

Recommended Actions

No immediate blocking or mitigation actions recommended. The IP demonstrates:

Low-risk profile suitable for continued monitoring
Legitimate cloud infrastructure footprint
No active threat indicators warranting firewall intervention

SOC Analyst Guidance: Treat as benign cloud infrastructure. Standard monitoring protocols apply. No escalation required based on current risk profile and threat intelligence.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country	🇺🇸 United States
Region	CO
City	Denver
Timezone	—
Latitude	39.74
Longitude	-104.98

🏢 Ownership & Registration

Organization	Alibaba Cloud LLC
ASN	AS45102
Network Name	AL-3
CIDR Block	47.235.0.0/16
RIR	ARIN
Country	United States
Abuse Contact	Available via RDAP

🌐 DNS Intelligence

PTR Record	No PTR
Forward Confirmed	No — PTR hostname does not resolve back to this IP (weak signal)

🔐 DNS Hygiene

Hygiene Score	20% (Poor)
SPF	Not configured
DMARC	Not configured
FCrDNS	Not verified
DNSSEC	Valid
CAA	Not configured

☁️ Network Classification

Infrastructure	Infrastructure / Datacenter
Service Purpose	Single-Service Host
Network Tier	Hosting — Infrastructure provider without advanced routing

CloudHosting

🔌 Services & Open Ports

Port	Service	Protocol	Banner
22	ssh	tcp	SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.12
Closed Ports	25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned)

Server	—
HTTP Title	—
SSH Version	SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.12

🔐 TLS Certificate

🔒

No certificate

Issued by —

N/A

SANs	None
Valid From	—
Valid Until	—

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

Dimension	Score	Sources	Observations
threat	35%	2	2
routing	25%	1	1
services	25%	1	1
ownership	0%	0	0
reputation	25%	1	1
geolocation	0%	0	0
Overall	18%	5	5

Coverage: 4/6 dimensions · Data sufficiency: partial

Data Coherence	Consistent (100%)
Attribution	Moderate (50%)
	OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen	2026-07-25 14:53:19 UTC
Last Seen	2026-07-30 04:40:28 UTC
Profile Built	2026-07-30 04:51:05 UTC
Data Freshness	Live
Signal Types	17
Total Observations	17

🔍 17 signal types · 17 observations collected

This report is generated from 17+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.

{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.

47.237.167.249📋 Copy